基于CAS和Liferay门户的统一身份认证系统

Uniform Identity Authentication System Based on CAS and Liferay Portal

统一身份认证系统是提供了用户身份信息库和接口服务以供其他应用系统接入,并验证用户身份的系统。通过对目前主流单点登录系统、单位内用户权限与组织架构数据库系统需求多样化的特点的介绍和对比,选择通过集成CAS单点登录系统与Liferay门户框架,设计和实现统一身份认证系统,来解决单位当前存在的多应用系统用户账户不统一,以及由此导致的冗余信息管理困难的问题。系统设计分为数据库系统、CAS单点登录系统和Liferay门户三部分,并具体给出了每部分的重点设计环节和实现过程,完成一次登录即可使用多个子系统,并实现统一的信息及应用集成,达到消除业务共享不畅的目的。该系统不仅提供统一的用户界面和集成的应用资源,还由于其高度的可配置性和扩展性,方便开发人员根据需要研发新的应用,便于管理人员对系统中的用户、组织、角色和站点进行管理,同时也有利于用户进行个性化定制,满足各方面使用和管理需求,起到更加充分利用网络资源的作用。

The unified identity authentication system is a system that provides users identity information database and application program interface for other application systems to access and verifies user identity.By introducing and comparing requirements diversification characteristics of the current mainstream single sign-on system and internal user rights and organizational structure database system,through the integration of the central authentication service and Liferay portal framework,we design and implement the unified identity authentication system to solve the problem of the disunity of user accounts in multiple application systems and the difficulty in managing redundant information.The system consists of three parts:database system,central authentication service and Liferay portal.The key design steps and implementation of each part are given in detail.Multiple subsystems can be used after one login,and unified information and application integration can be realized to attain the goal of eliminating inconvenience of business sharing.The system not only provides a unified user interface and integrated application resources,but also can be easily extended by developers according to their requirements because of its high configurability and extensibility.It is convenient for managers to manage users,organizations,roles and sites in the system,and at the same time,also beneficial for users to make personalized customization,meeting the use and management requirements of all aspects and playing the role of making full use of network resources.